auth for posting entries routes